PT-2023-18289 · Hlos · Hlos

Name of the Vulnerable Software and Affected Versions: HLOS affected versions not specified Description: The issue is related to a cryptographic problem in HLOS due to improper authentication during key velocity checks when using more than one key. Recommendations: At the moment, there is no...

Improper Authentication

gitlab is vulnerable to Improper Authentication. The vulnerability occurs due to incorrect authentication with package registries when IP restrictions are configured resulting in allowing a malicious attacker to misuse a deploy token from any location...

Improper Authentication

gitlab is vulnerable to Improper Authentication. The vulnerability exists due to missing authentication which allows an attacker with access to a victim's session to disable two-factor authentication...

Improper Authentication

gitlab is vulnerable to Improper Authentication. The vulnerability allows a malicious attacker to steal a users API token via a malicious link due to insufficient validation...

Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile

🕵️ Vulnerability Scanner 🛡️ This Python script helps you scan...

The vulnerability of Google Chrome’s Autofill function allows attackers to circumvent navigation restrictions.

The vulnerability of Google Chrome’s Autofill function is related to improper authentication procedures. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

Improper Authentication

silverstripe/framework is vulnerable to Improper Authentication. The vulnerability exists due to the user creation process in Member.php, which inserts an empty password when a new user is created. While the default member authenticator and login form require a non-empty password, other...

Moxa OnCell Improper Authentication (CVE-2016-8362)

An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series...

Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile

nmap-CVE-2023-35078-Exploit Nmap script to exploit CVE-2023-35...

Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile

CVE-2023-35078 This script ethically checks for the presence...

Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile

CVE-2023-35078-Poc-Exploit This tool is built in golang langua...

Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile

CVE-2023-35078-Poc-Exploit This tool is built in golang langua...

Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile

CVE-2023-35078-Poc-Exploit This tool is built in golang langua...

Exploit for Improper Authentication in Wpdeveloper Essential_Addons_For_Elementor

Mass-CVE-2023-32243 Mass-CVE-2023-32243 !...

PT-2023-5209 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom affected versions not specified Description: The issue is related to improper authentication in Zoom clients, which may allow an authenticated user to conduct a denial of service via network access. This could potentially allow a remote...

Exploit for Improper Authentication in Hikvision Ds-2Cd2032-I_Firmware

CVE-2017-7921 - Hikvision Camera Series Improper Authenticatio...

Information Disclosure

gitlab is vulnerable to Information Disclosure. The library contains an improper authentication mechanism which allows a user with certain amount of information to authenticate without a personal access token and gain access to sensitive user information...

Improper Authentication

gitLab is vulnerable to Improper Authentication. This vulnerability exists because it does not properly enforce IP address restrictions, allowing an attacker to misuse a valid deploy token from any location...

Walchem Intuition 9

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Walchem Equipment: Intuition 9 Vulnerabilities: Missing Authentication for Critical Function, Improper Authentication 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...

CVE-2023-37362 Weintek Weincloud Improper Authentication

Weintek Weincloud v0.13.6 could allow an attacker to abuse the registration functionality to login with testing credentials to the official website...